Phishing Emails Target Hong Kong MPF Members
Summary
MPFA and eMPF Platform Company Limited have issued an alert regarding phishing emails originating from noreply@hkmpf.com that falsely claim suspicious logins or abnormal activities in recipients' eMPF Platform accounts. The emails direct users to fraudulent websites in an attempt to harvest login credentials. Both MPFA and eMPF Company have confirmed they have no connection to these emails and have reported the incidents to Police. Official email domains for MPFA are @mpfa.org.hk and for eMPF Company are @empf.org.hk, @support.empf.org.hk, and @osc.empf.org.hk.
“MPFA is highly concerned about those cases and seriously clarifies that neither MPFA nor eMPF Company has any connection with those emails and the fraudulent website.”
Firms operating online financial account portals, including MPF scheme administrators, should review their domain-protection and anti-impersonation strategies in light of this credential-harvesting campaign. Guidance to customers on verifying legitimate communications—checking sender domains against official lists—represents a proportionate first step given the low cost of the measure relative to the potential harm from successful phishing.
About this source
GovPing monitors MPFA Hong Kong News for new insurance regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 3 changes logged to date.
What changed
MPFA and eMPF Company have issued a joint fraud alert regarding phishing emails impersonating both organisations. The emails, sent from noreply@hkmpf.com, falsely claim that recipients' eMPF Platform accounts have been subject to suspicious logins or abnormal activities, and attempt to lure recipients into clicking hyperlinks leading to fraudulent websites.
Financial services firms operating online member portals, including MPF administrators, should review domain-spoofing protections and consider issuing guidance to customers distinguishing legitimate communications from phishing attempts. Recipients of suspicious emails claiming to be from MPFA or eMPF Company should verify sender domains and contact official numbers directly rather than using contact details provided in suspicious communications.
What to do next
- Anyone who has received those emails or clicked on any of the links, and suspects that personal information may have been leaked should report it to the Police for assistance immediately.
- If eMPF users receive suspicious emails, please contact immediately MPFA (Tel: 2918 0102 / email: mpfa@mpfa.org.hk) or eMPF Company (Tel: 183 2622 / email: enquiry@support.empf.org.hk)
Archived snapshot
Apr 22, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Info Center
Press Releases
- Your Position
- Homepage
- Information Centre
- Press Releases
- Beware of Fraudulent Emails Purporting to be from MPFA or eMPF Company
Share
- Copy Address URL copied!
- Print This Page
Beware of Fraudulent Emails Purporting to be from MPFA or eMPF Company
MPFA noted recently that there have been phishing emails originating from noreply@hkmpf.com, falsely claiming to be from MPFA and/or eMPF Platform Company Limited (eMPF Company). Those emails claimed that there are suspicious logins and abnormal activities in the eMPF Platform (eMPF) accounts of the recipients, attempting to lure them into clicking on hyperlinks embedded in the emails that direct them to fraudulent websites.
MPFA is highly concerned about those cases and seriously clarifies that neither MPFA nor eMPF Company has any connection with those emails and the fraudulent website. The MPFA and the eMPF Company reiterate that they will not request members of the public to access or use eMPF TM services through any channels other than the official eMPF website at https://www.empf.org.hk and the eMPF mobile application. The eMPF Company has reported those cases to the Police and urges the public to remain vigilant. Anyone who has received those emails or clicked on any of the links, and suspects that personal information may have been leaked should report it to the Police for assistance immediately.
MPFA reminds the public that the official email domain of MPFA is “@mpfa.org.hk”, and those of eMPF Company are “@empf.org.hk”, “@support.empf.org.hk” and “@osc.empf.org.hk”. If members of the public receive emails claiming to be from either MPFA or eMPF Company that are not sent from the above official email domains, they should not click on any hyperlink in the email or provide any eMPF account information.
If eMPF users receive suspicious emails, please contact immediately MPFA (Tel: 2918 0102 / email: mpfa@mpfa.org.hk) or eMPF Company (Tel: 183 2622 / email: enquiry@support.empf.org.hk) .
– Ends –
2 April 2026
Parties
Related changes
Get daily alerts for MPFA Hong Kong News
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from MPFA.
The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when MPFA Hong Kong News publishes new changes.
Subscribed!
Optional. Filters your digest to exactly the updates that matter to you.